Marketplace for presenting advertisements in a scalable data broadcasting system

ABSTRACT

An ad-marketplace system manages an exchange for advertisement opportunities from a plurality of content brokers. Each advertising opportunity can include one or more attributes that describe advertisement slots during a broadcast of a data stream. The ad-marketplace system can receive one or more bids for an advertising opportunity associated with a media stream, and can select a matching bid from an advertiser for the advertising opportunity. Each bid can specify one or more advertising requirements that are to be satisfied by the advertising opportunity. When the ad-marketplace system selects the matching bid, the ad-marketplace system establishes a contract between the media broker, and places an initial payment from the advertiser in escrow. The ad-marketplace system can provide a payment to the media broker after confirming that a set of consumers have consumed the advertisement.

RELATED APPLICATIONS

The subject matter of this application is related to the subject matterof the following applications:

-   -   U.S. patent application Ser. No. 14/092,680 (Attorney Docket No.        PARC-20130397US01), entitled “METHOD AND APPARATUS FOR SCALABLE        DATA BROADCASTING,” by inventors Priya Mahadevan, Roger C.        Meike, and Glenn C. Scott, filed on 27 Nov. 2013;    -   U.S. patent application Ser. No. 14/195,669 (Attorney Docket No.        PARC-20130575US01), entitled “Method and Apparatus for Streaming        Advertisements in a Scalable Data Broadcasting System,” by        inventors Priya Mahadevan, Glenn C. Scott and Roger C. Meike,        filed on 3 Mar. 2014; and    -   U.S. patent application Ser. No. 14/195,717 (Attorney Docket No.        PARC-20130794US01), entitled “Method and Apparatus for        Maintaining Content View Statistics in a Named Data Network,” by        inventors Priya Mahadevan, Glenn C. Scott and Roger C. Meike,        filed on 3 Mar. 2014; the disclosures of which are incorporated        by reference in their entirety herein.

BACKGROUND

1. Field

This disclosure is generally related to publishing digital content. Morespecifically, this disclosure is related to a marketplace for sellingadvertisement opportunities associated with a data stream broadcastedover a network, such as the Internet, an Information Centric Network(ICN), a client-server architecture, or a peer-to-peer network.

2. Related Art

In the modern digital economy, content producers can publish theircontent in digital form through one or more streaming or broadcastingservices to earn revenue through various revenue models. Musicproducers, for example, oftentimes license their music to onlinestreaming radio stations that earn money by broadcasting advertisementsto their listeners over a computer network. The music producers may alsolicense their music content to music recommendation services that tailorsong and advertisement selections to each consumer (e.g., the Pandorastreaming service from Pandora Media Inc.).

Similarly, movie and television-show producers can license their digitalcontent to video streaming services that allow consumers to view moviesor shows over the Internet. Some of these video streaming servicesnegotiate a licensing fee with each producer, and earn revenue bycharging consumers a flat monthly fee (e.g., Netflix, Inc.), and/or bypresenting advertising commercials to consumers (e.g., Hulu.com).

These streaming services typically attempt to secure a publisher'sdigital content by requiring their customers to use the service's customsoftware application to receive the media stream. Netflix and Hulu, forexample, deploy proprietary video streaming applications that make itdifficult for a user to illegally copy a media stream by not allowingthe user to “save” the media stream to a local disc. However, it ispossible for consumers to use third-party applications that snoop onnetwork traffic in order to save the media stream to disc. Once theconsumer has saved a copy of the media stream, it is possible for theconsumer to illegally share the media stream anonymously given that themedia streaming service typically transmits identical copies of themedia stream to many consumers.

Cable and Satellite broadcasting companies, on the other hand, providetraditional television broadcasts to consumers over a secured digitalinfrastructure. A broadcasting company typically provisions a consumer'sclient device (e.g., as a set-top box device) when the consumersubscribes to a service from the broadcasting company. This provisioningprocess verifies that the client device is associated with a payingcustomer, and configures the device to detect and present thebroadcasted media to the paying customer.

These broadcasting companies typically encrypt each media stream using astream-specific key before broadcasting each media stream to a group ofsubscribers. Each client device receives a key from the broadcastingcompany (e.g., periodically), and uses the key to decrypt the mediastream just before presenting the media stream to the user. However, itis possible for a consumer to save the broadcasted media stream to diskonce the media stream has been decrypted, for example, by using ahigh-definition multimedia interface (HDMI) capture card on a computer.Also, because the broadcasting company transmits the same media streamto the group of consumers, it is possible for the consumer to duplicateand illegally share the media stream with others anonymously.

SUMMARY

One embodiment provides a data-publishing system that facilitatesbroadcasting a data stream to a plurality of authorized client devices.A publisher can protect the data stream from unauthorized access byconverting the data stream into an encoded data stream that by itselfcannot be used to reproduce the original data stream. The publisher canalso generate an “encoding sauce” that includes instructions forconverting the encoded data stream into a new stream that can be used byauthorized users.

The publisher can designate one or more brokers to authorize user accessto the data stream. A broker can receive a request for the data streamfrom a user, and can process the request to obtain authorization oridentification information for the user. If the user can be allowed toaccess the data stream, the broker can grant the user access to the datastream by generating a “secret sauce” that the user's computing devicecan use to decode the encoded data stream. In some embodiments, thebroker does not need to generate a unique secret sauce from the basesauce. For example, some encoded data streams might not need a secretsauce to decode the stream. The broker can forward the encoding sauce toa client device, which allows the client device to process the encodeddata stream to reproduce the original data stream (whose contents arenot personalized for each client).

When the user's client device requests the data stream from thepublisher, the publisher can redirect the client device to a broker thatcontrols access to the data stream's contents. The client device canobtain the encoded data stream from the publisher (or from any othersource), and obtains a secret sauce stream from the broker. The clientdevice processes the encoded data stream using the secret sauce streamto produce a personalized data stream that includes the data stream'scontents. The broker can also provide advertisements and/or personalizedcoupons to a user's client device as a way to pay for the data stream.If the user is presented with a coupon as an advertisement, the user canredeem the coupon to obtain a product or a service at a discounted priceor for free. For example, the user can use a code printed on the couponto redeem the coupon via a website or mobile application associated withthe advertiser. Alternatively, the user can print the digital coupon,and can present the printed coupon at a brick-and-mortar venueassociated with the advertiser.

The following terms describe elements of a data-publishing system:

Data Stream: A collection of data that is to be published. Examplesinclude an audio file, a video stream, a data file, an executable file,etc.

Base Sauce: Instructions for generating an encoded data stream, and forgenerating an encoding sauce that can be provided to a trusted brokerthat processes requests for the data stream.

Encoded Data Stream: A collection of data that can be provided to anyclient device, a cache, or any computer in a network. Client devicescannot decode the original data stream directly from the encoded datastream alone.

Encoding Sauce: Instructions for generating a secret sauce that istypically unique to a client device or incorporates a unique clientidentifier (ID), etc.

Secret Sauce: Instructions for modifying an encoded data stream toproduce a personalized data stream that is tailored to the requestingclient device or ID.

Personal Data Stream: A collection of data whose contents may bepersonalized to the requesting client device or user. The personalizeddata stream can include digital watermarks that encode a uniqueidentifier for the client device or ID. The personalized data stream'scontents can also include additional data that is tailored to the clientdevice or its user.

Advertisement Challenge: The broker can provide an advertisementchallenge to a client device along with an advertisement that is to bepresented to the user. The advertisement challenge can include a set ofinstructions that allow the client device to compute achallenge-response, from the advertisement, that proves the clientdevice has consumed the advertisement. The client device has “consumed”the advertisement (or a personalized digital coupon) when the clientdevice has obtained the advertisement from a remote device, and hasprocessed the advertisement to present the advertisement to a localuser.

Challenge Response: A challenge response includes one or more pieces ofdata derived from an advertisement stream that prove a client device hasconsumed an advertisement. The challenge question is dynamicallygenerated, and can vary over time. This way, even if the same ad ispresented again to the same client device at a later date, the clientdevice would need to generate a new challenge response for theadvertisement. The client device cannot use a previously computedresponse as the challenge response. This also prevents client devicesfrom sharing a challenge response with other clients, as each clientwould get a different challenge question when presented with the sameadvertisement.

Advertisement Token: An advertisement token is an encrypted data packetthat includes a challenge response for an advertisement or apersonalized coupon. The advertisement token can be signed by a user'sor a client device's private key. Each advertisement token can be wortha predetermined number of credits that a user can use to consume a datastream from the broker.

One embodiment provides an ad-marketplace system that manages anexchange for advertisement opportunities from a plurality of contentbrokers. Each advertising opportunity can include one or more attributesthat describe the advertisement slots during a broadcast of a datastream. The ad-marketplace system can receive one or more bids for anadvertising opportunity associated with a media stream, and can select amatching bid from an advertiser for the advertising opportunity. Eachbid can specify one or more advertising requirements that are to besatisfied by the advertising opportunity. When the ad-marketplace systemselects the matching bid, the ad-marketplace system establishes acontract between the media broker and the advertiser.

In some embodiments, while establishing the contract, the ad-marketplacesystem receives a payment from the advertiser, and places the payment inescrow. When the media broker presents advertisements to a set ofconsumers, the ad-marketplace system can provide a payment to the mediabroker after confirming that the advertising opportunity has satisfiedthe advertising requirements.

In some embodiments, the ad-marketplace system selects a matching bid byperforming an auction. The auction can include at least one of afirst-price sealed-bid (FPSB) auction; an English auction; a Dutchauction; and a sealed-bid second-price auction.

In some embodiments, while establishing the contract further, thead-marketplace system can receive, from the advertiser, a reference tothe advertisement that is to be presented during the advertisingopportunity. The ad-marketplace system provides the reference to themedia broker, and receives, from the media broker, a challenge questionfor the advertisement and an expected challenge-response value for theadvertisement's challenge question.

In some embodiments, while confirming that the set of consumers haveconsumed the advertisement, the ad-marketplace system can receivechallenge-response packets from the set of client devices. A respectivechallenge-response packet can include at least a challenge-responsevalue from a client device, such that the challenge-response value isspecific to a current advertising opportunity at the client device. Thead-marketplace system then confirms that the consumers have consumed theadvertisement by determining that a challenge-response value receivedfrom a given client device matches an expected challenge-response valuefor the advertising opportunity at the given client device.

In some embodiments, a challenge-response packet can include a brokeridentifier for the media broker, and/or a media-stream identifier forthe media stream.

In some embodiments, the ad-marketplace system generates an analyticsreport based on the set of valid challenge-response packets, wherein theanalytics report includes aggregated content-view statistics for themedia stream. The ad-marketplace system can provide the analytics reportto the media broker, the advertiser, or a producer of the media stream.

In some embodiments, the advertising opportunity can also specify anasking price for providing an advertisement during the advertisingopportunity, an expected number of consumers of the media stream duringthe advertising opportunity, demographic information for consumers ofthe media stream, and/or one or more keywords associated with the mediastream.

In some embodiments, the ad-marketplace system can terminate thecontract in response to determining that the advertising opportunity hasexpired or that the advertising requirements have been satisfied.

In some embodiments, the attributes include a time interval during whichthe media broker is to provide access to the media stream, a userdemographic for the media stream, and/or keywords for the media stream.

In some embodiments, the advertising requirements include at least aminimum-client-count requirement for a minimum number of clients towhich the media broker is to present the advertisement, a target userdemographic for the advertisement, and/or a keyword for theadvertisement.

In some embodiments, the ad-marketplace system can maintain a record ofa media broker's reputation. For example, the media broker's reputationmay depend on historical statistics on whether a number of advertisementconsumers during an advertisement campaign matched an expected number ofconsumers. As another example, the media broker's reputation may dependon historical statistics on whether characteristics for advertisementconsumers during an advertising campaign matched an expected consumerdemographic, and/or historical statistics on how well an advertisingopportunity's keywords matched the data object during which theadvertisement was presented.

In some embodiments, the ad-marketplace system can maintain a record ofan advertiser's reputation. For example, the advertiser's reputation maydepend on a quality of advertisements from the advertiser, and/orconsumer-engagement measurements from consumers of advertisements fromthe advertiser. As another example, the advertiser's reputation maydepend on historical statistics on how well keywords from anadvertisement's description matched an advertisement from theadvertiser.

In some embodiments, the ad-marketplace system can generate anad-campaign report for the advertiser, such that the ad-campaign reportincludes aggregated information that indicates an effectiveness ofpresenting the advertisement to consumers of the media stream. Theaggregated information can include a number of client devices that haveconsumed the advertisement for a predetermined time interval, andaggregated demographic information for consumers of the advertisement.

One embodiment provides a media broker that can sell advertisement slotsvia the ad-marketplace system. The broker can generate an advertisingopportunity for a media stream, such that the advertising opportunityspecifies one or more attributes describing the advertising opportunity.The broker can provide the advertising opportunity to an ad-marketplacesystem, and can receive a reference to an advertisement for anadvertising bid that was selected for the advertising opportunity. Thebroker then creates a challenge-query for the advertising opportunity,such that the challenge query can include instructions for generating achallenge-response based on the advertisement. A valid challengeresponse from a client device indicates that the client device hasindeed consumed the advertisement during the advertising opportunity.

In some embodiments, the advertising opportunity's attributes include atime interval during which the media stream is accessible by a set ofclient devices.

In some embodiments, the broker can receive, from a client device, arequest to access a segment of the media stream. Then, in response todetermining that the client device needs to present an advertisement,the broker can provide an advertisement to the client device. The brokerverifies that the client device has presented the advertisement duringthe client device's advertising opportunity prior to allowing the clientdevice to access the media stream segment.

In some embodiments, the broker determines that the client device needsto present an advertisement by determining that the client device or auser does not have a sufficient number of credits to consume the mediastream, or by determining that a user of the client device has not paida fee to consume the media stream.

In some embodiments, while providing the advertisement, the broker cangenerate a secret sauce that inserts the advertisement into the mediastream, and sends the secret sauce to the client device. The secretsauce can include at least the reference to the advertisement and thechallenge-query for the advertisement. The broker can encode theencoding sauce using a public key from the client device.

In some embodiments, while providing the advertisement, the broker cangenerate an advertisement packet that includes at least the reference tothe advertisement, the challenge query for the advertising opportunity,and a public key for the media broker. The broker can encrypt theadvertisement packet using a public key from the client device, andsends the advertisement packet to the client device.

BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 illustrates an exemplary computing environment that facilitatesbrokering access to digital content in accordance with an embodiment.

FIG. 2 illustrates an exemplary computing environment that facilitatesbrokering access to digital content over an information-centric networkin accordance with an embodiment.

FIG. 3 presents a flow chart illustrating a method for publishing a datastream in accordance with an embodiment.

FIG. 4 presents a flow chart illustrating a method for assigning abroker to a data-consuming client device in accordance with anembodiment.

FIG. 5 presents a flow chart illustrating a method for identifying anentity for whom a given personalized data stream was generated inaccordance with an embodiment.

FIG. 6 illustrates a hierarchy of brokers in accordance with anembodiment.

FIG. 7A illustrates an encoded data stream and a set of checksums whichhave been generated from a base data stream in accordance with anembodiment.

FIG. 7B illustrates a set of watermarks computed for a personalized datastream, and a checksum computed from multiple checksums and watermarksin accordance with an embodiment.

FIG. 7C illustrates a personalized data stream and a checksum computedfrom personalized data stream in accordance with an embodiment.

FIG. 8 presents a flow chart illustrating a method for presenting a datastream to a user, and providing demographic information to a broker inaccordance with an embodiment.

FIG. 9A presents a flow chart illustrating a method for keeping track ofdemographics for consumers of a data stream in accordance with anembodiment.

FIG. 9B presents a flow chart illustrating a method for generating asecret sauce for a user's client device in accordance with anembodiment.

FIG. 9C presents a flow chart illustrating a method for processing arequest for an analytics report in accordance with an embodiment.

FIG. 10 illustrates an exemplary computing environment that facilitatesplacing advertisements in content streamed over an information-centricnetwork in accordance with an embodiment.

FIG. 11 presents a flow chart illustrating a method performed by amarketplace to match advertisers to a broker's advertising opportunityin accordance with an embodiment.

FIG. 12 presents a flow chart illustrating a method performed by amarketplace to establish an advertising campaign between an advertiserand a data broker in accordance with an embodiment.

FIG. 13 presents a flow chart illustrating a method performed by abroker to process a client's request for access to a data stream inaccordance with an embodiment.

FIG. 14 presents a flow chart illustrating a method performed by abroker to provide a client device an opportunity to generateadvertisement tokens in accordance with an embodiment.

FIG. 15 presents a flow chart illustrating a method performed by aclient device to generate a personalized data stream for a local user inaccordance with an embodiment.

FIG. 16 presents a flow chart illustrating a method performed by aclient device to present an advertisement to a local user in accordancewith an embodiment.

FIG. 17 illustrates an exemplary apparatus that facilitates brokeringaccess to digital content in accordance with an embodiment.

FIG. 18 illustrates an exemplary computer system that facilitatesbrokering access to digital content in accordance with an embodiment.

In the figures, like reference numerals refer to the same figureelements.

DETAILED DESCRIPTION

The following description is presented to enable any person skilled inthe art to make and use the embodiments, and is provided in the contextof a particular application and its requirements. Various modificationsto the disclosed embodiments will be readily apparent to those skilledin the art, and the general principles defined herein may be applied toother embodiments and applications without departing from the spirit andscope of the present disclosure. Thus, the present invention is notlimited to the embodiments shown, but is to be accorded the widest scopeconsistent with the principles and features disclosed herein.

Overview

Embodiments of the present invention provide a data-publishing systemthat solves the problem of broadcasting a data stream across a computernetwork, while only allowing authorized devices to consume the datastream. A data publisher can use the data-publishing system to publish adata stream so that each authorized recipient obtains a personalizedversion of the data stream. The data stream can include a live video oraudio stream, a recorded video or audio stream, an executable file(e.g., binary code), a digital document or image, etc.

For example, a publisher can broadcast a live or pre-recorded mediastream to a plurality of consumers in a secure way by encoding ordamaging the media stream so that the stream's contents cannot bereproduced from the encoded stream alone. The publisher also configuresone or more brokers to control access to the media stream by providingthese brokers with an encoding “sauce” that indicates how to decode orfix the media stream in a way that generates a personalized stream foreach recipient.

A broker can use the encoding sauce to generate a secret sauce for eachvalid recipient of a data stream. Each recipient's client device canreceive segments of the encoded data stream from the publisher itself,and/or from any other network device that has cached the encoded datastream segments. These devices then use the secret sauce that they mayhave obtained from the broker to decode or fix the encoded data streamin a way that personalizes the data stream for that recipient. In someembodiments, a personalized data stream can include a digital watermarkthat encodes an identifier of the stream's intended recipient. Thisallows a publisher to analyze a pirated data stream, such as a movie, todetermine who has allowed the data stream to be copied illegally.

In some embodiments, the publisher can generate the encoded data streamby extracting a plurality of small data segments that are critical forpresenting or otherwise making use of the data stream. These extracteddata segments can be provided to a client device via a secret saucestream that requires a significantly lower bandwidth than the encodeddata stream. The secret sauce stream can include instructions whichindicate how the extracted data segments are to be inserted back intothe encoded data stream. For example, these instructions can map eachdata segment of the secret sauce stream to a byte offset of the encodeddata stream. The client device can receive the high-bandwidth encodeddata stream from the publisher or from a data-cache over an informationcentric networking (ICN) system, or through any computer network nowknown or later developed. Also, the client device can receive thelow-bandwidth secret sauce stream from the broker, or from any otherentity which the broker has designated to generate and/or disseminatesecret sauce streams for a given set of users or client devices.

FIG. 1 illustrates an exemplary computing environment 100 thatfacilitates brokering access to digital content in accordance with anembodiment.

Environment 100 can include publishers, brokers, and client devices,which can each be coupled to any wired or wireless computer network nowknown or later developed. A publisher 102 can publish a data stream asan encoded data stream, and only authorized clients can get access tothe secret sauce from the broker. Any client device can access theencoded data stream directly from the publisher, or from any otherdevices that store a copy of the encoded data stream (e.g., a cache, orother network devices). However, only authorized devices (e.g., clientdevice 106) can use the secret sauce to convert the encoded data streaminto a personalized data stream. The encoded data stream is itselfuseless to client devices that do not have a valid secret sauce fordecoding the stream.

Publisher 102 can include a primary encoder 108 that uses a base sauce112 to encode a data stream 110. Base sauce 112 can be specific to datastream 110, or can be re-used for a plurality of data streams frompublisher 102. Base sauce 112 can include instructions for generating anencoded data stream 114, and for generating an encoding sauce 116 thatcan be provided to a trusted broker that processes requests from clientsfor the data stream. Encoded data stream 114 can include a collection ofdata objects that can be provided to any client device or computer in anetwork, without the risk of revealing the data stream's contents tounauthorized users. A user's client device cannot decode the originaldata stream from encoded data stream 114 alone.

Publisher 102 uses base sauce 112 to generate encoded sauce 116 forencoded data stream 114, and provides encoding sauce 116 to a broker 104over a trusted channel 132. Encoding sauce 116 can include instructionsused by broker 104 to generating a “secret sauce” for a client devicethat has valid privileges. Broker 104 is responsible for granting accessto secret sauce 122 only to users that have valid access privileges.

In some embodiments, broker 104 can include a secondary encoder 118 thatuses encoding sauce 116 to generate secret sauce 122 for client 106.Secondary encoder 118 can generate secret sauce 122 for client 106 inadvance (e.g., before receiving a request for secret sauce 122), or inresponse to receiving a request from client 106. For example, whenclient device 106 requests data stream 110 from publisher 102, publisher102 can respond to the request by providing encoded data stream 114 toclient 106, and redirecting client 106 to obtain secret sauce 122 frombroker 104.

In some embodiments, client device 106 can obtain encoded data stream114 from any network device 130 that stores encoded data stream 114,such as a cache sever, a CDN server, or any peer-2-peer device. Clientdevice 106 can process encoded data stream 114 by accessing secret sauce122, which is controlled by broker 104. Client 106 can access secretsauce 122 by sending a request to broker 104, such that the request caninclude a client public key or identifier (ID), or any other form ofauthentication such as user-id/password for client 106.

If broker 104 determines that client 106 has valid access privileges,secondary encoder 118 can use encoding sauce 116 to generate secretsauce 122 based on the public key or the ID for client 106. Secret sauce122 includes instructions for modifying encoded data stream 114 toproduce a personalized data stream 126 that is tailored to client 106.Broker 104 then sends secret sauce 122 to client 106.

Client 106 includes a decoder 124 that processes encoded data stream 114using secret sauce 122 to generate personalized data stream 126.Personalized data stream 126 can include a stream or collection of dataobjects whose contents may be personalized to client 106 or a user ofclient 106. Personalized data stream 126 can include digital watermarksthat encode a unique ID for client 106 or its user, and/or can includeadditional data that is tailored to the client device or its user.

In some embodiments, a publisher can broadcast an encoded data stream toa plurality of devices over an information-centric network. In ICN, eachpiece of content is individually named, and each piece of data is boundto a unique name that distinguishes the data from any other piece ofdata, such as other versions of the same data or data from othersources. This unique name allows a network device to request the data bydisseminating a request or an Interest that indicates the unique name,and can obtain the data independent from the data's storage location,network location, application, and means of transportation. Named-datanetwork (NDN) or a content-centric network (CCN) are examples of ICNarchitecture; the following terms describe elements of an NDN or CCNarchitecture:

Content Object: A single piece of named data, which is bound to a uniquename. Content Objects are “persistent,” which means that a ContentObject can move around within a computing device, or across differentcomputing devices, but does not change. If any component of the ContentObject changes, the entity that made the change creates a new ContentObject that includes the updated content, and binds the new ContentObject to a new unique name.

Unique Names: A name in an ICN is typically location independent anduniquely identifies a Content Object. A data-forwarding device can usethe name or name prefix to forward a packet toward a network node thatgenerates or stores the Content Object, regardless of a network addressor physical location for the Content Object. In some embodiments, thename may be a hierarchically structured variable-length identifier(HSVLI). The HSVLI can be divided into several hierarchical components,which can be structured in various ways. For example, the individualname components parc, home, ndn, and test.txt can be structured in aleft-oriented prefix-major fashion to form the name“/parc/home/ndn/test.txt.” Thus, the name “/parc/home/ndn” can be a“parent” or “prefix” of “/parc/home/ndn/test.txt.” Additional componentscan be used to distinguish between different versions of the contentitem, such as a collaborative document.

In some embodiments, the name can include a non-hierarchical identifier,such as a hash value that is derived from the Content Object's data(e.g., a checksum value) and/or from elements of the Content Object'sname. A description of a hash-based name is described in U.S. patentapplication Ser. No. 13/847,814 (entitled “ORDERED-ELEMENT NAMING FORNAME-BASED PACKET FORWARDING,” by inventor Ignacio Solis, filed 20 Mar.2013), which is hereby incorporated by reference. A name can also be aflat label. Hereinafter, “name” is used to refer to any name for a pieceof data in a name-data network, such as a hierarchical name or nameprefix, a flat name, a fixed-length name, an arbitrary-length name, or alabel (e.g., a Multiprotocol Label Switching (MPLS) label).

Interest: A packet that indicates a request for a piece of data, andincludes a name (or a name prefix) for the piece of data. A dataconsumer can disseminate a request or Interest across aninformation-centric network, which CCN/NDN routers can propagate towarda storage device (e.g., a cache server) or a data producer that canprovide the requested data to satisfy the request or Interest.

In some embodiments, the ICN system can include a content-centricnetworking (CCN) architecture. However, the methods disclosed herein arealso applicable to other ICN architectures as well. A description of aCCN architecture is described in U.S. patent application Ser. No.12/338,175 (entitled “CONTROLLING THE SPREAD OF INTERESTS AND CONTENT INA CONTENT CENTRIC NETWORK,” by inventors Van L. Jacobson and Diana K.Smetters, filed 18 Dec. 2008), which is hereby incorporated byreference.

FIG. 2 illustrates an exemplary computing environment 200 thatfacilitates brokering access to digital content over aninformation-centric network 210 in accordance with an embodiment.Environment 200 can include a publisher that publishes a data stream,and one or more brokers 204 that control access to the data stream.Specifically, publisher 202 can include a computing device thatdisseminates an encoded data stream 222 over an information-centricnetwork 110.

Publisher 202 can publish the data stream by generating an encoded datastream 222, and disseminating encoded data stream 222 overinformation-centric network 210. Encoded data stream 222 may be encoded,for example, by extracting every n^(th) byte (e.g., 100^(th) byte) fromthe original data stream. Publisher 202 can also generate an encodingsauce 218 for encoded data stream 222, and can provide encoding sauce218 to one or more of brokers 204 over a trusted channel 208 (e.g., asecure network connection or a tangible storage device). Publisher 202can encrypt encoding sauce 218 using a public key from a broker 204 (orusing a private key that belongs to publisher 202), and can signencoding sauce 218 using a digital certificate. Encoding sauce 218 caninclude the data segments that have been extracted from the originaldata stream (e.g., every 100^(th) byte of the original data stream), aswell as instructions indicating how these data segments are to bere-inserted into encoded data stream 222. Encoding sauce 218 can alsoindicate instructions for modifying one or more of the extracted datasegments to generate digital watermarks for a user.

In some embodiments, environment 200 can also include a client device206 that can obtain encoded data stream 222 via information-centricnetwork 210, and can obtain a secret sauce 220 for the data stream frombroker 204.1 either via information-centric network 210 or via any othercomputer network now known or later developed. Client device 206 caninclude a smartphone, a tablet computer, or any other computing devicesuch as a laptop computer, a desktop computer, etc. To obtain encodeddata stream 222, device 206 can disseminate a request for encoded datastream 222 over information-centric network 210 (or an Interest forencoded data stream 222 over content-centric network 210). Publisher 202can satisfy the request or Interest by returning a packet that includesa unique name for encoded data stream 222, and identifies a broker(e.g., broker 204.1) that is to control access to the data stream.

In some embodiments, client device 206 can disseminate one or moreInterests for encoded data stream 222, such that each Interestcorresponds to a portion of encoded data stream 222. The Interest may besatisfied by publisher 202, or by any device within information-centricnetwork 210. For example, in some embodiments, one or more of theContent Objects for encoded data stream 222 may be cached within acontent store (CS) within a router 212, a cache server 214, and/or apeer client device 216. Recall that encoded data stream 222 itselfcannot be used to reproduce the data stream's contents. Hence, in someembodiments, any device within information-centric network 210 can cacheContent Objects for encoded data stream 222 without sacrificing itssecurity, and at the same time reducing the load on publisher 202 as thenumber of Interests that need to be processed by publisher 202 aresignificantly reduced.

Client device 206 can gain access to the contents of encoded data stream222 by disseminating one or more Interests for the data stream's secretsauce stream. Broker 204.1 can use the publisher's encoding sauce togenerate secret sauce Content Objects that satisfy these Interests(e.g., secret sauce 220), and that are customized for client device 206.Broker 204 can encrypt each secret sauce Content Object using a publickey from a client device 206 (or the broker's own private key), and cansign these Content Objects using a local digital certificate. Clientdevice 206 then processes encoded data stream 222 using the secret saucestream (e.g., secret sauce 220) to generate a personalized data streamfor the user.

In some embodiments, broker 204.1 generates a plurality of secret sauceobjects for the data stream, such that each secret sauce object decodesa portion of the encoded data stream. For example, broker 204.1 cangenerate a secret sauce object for each of the encoded data stream'sContent Objects or for a set of media segments. As another example, ifthe encoded data stream corresponds to a media stream, publisher 202 canpartition the media stream into a plurality of media segments, andbroker 204.1 can generate a secret sauce Content Object for each mediasegment. This way, broker 204.1 can require device 206 to display a setof commercials before receiving a secret sauce object for a subsequentsegment of the encoded media stream that are to be presented after thecommercials.

Further, given that broker 204.1 needs to generate a secret sauce streamfor each client device that has valid access to the data stream, broker204.1 can restrict access to the data stream based on pre-determineddata-restricting criteria, and can keep track of various data-accessanalytics for various data streams. For example, broker 204.1 canrestrict access to only client devices that have purchased the datastream, that have subscribed into a data-streaming service (e.g., anonline video streaming service, such as Netflix), and/or that belong ordo not belong to a predetermined demographic (e.g., the recipient doesnot meet an 18-year old age requirement).

Broker 204.1 can also keep track of which client devices have accessedwhich data streams, how much of a data stream they have accessed,consumer demographic information for each data stream, etc. When thedata stream corresponds to a media stream, broker 204.1 can also keeptrack of which advertisements have been viewed during each media streamor by each consumer, a revenue amount that has been generated from eachmedia stream or from each consumer, etc. Broker 204.1 can use theseanalytics to bill users for the data streams they have accessed, to billusers for a tiered subscription service to various data streams, todetermine a user's stream-preference information, etc.

Also, given that each secret sauce stream can include executableinstructions, broker 204.1 can use the secret sauce stream and analyticsinformation to insert user-targeted advertisements into the media streampresented by the client device. Broker 204.1 can select a user-targetedadvertisement for a client device based on the analytics information,and generates the secret sauce stream to include instructions thatinsert or embed the advertisement into an existing media stream. Forexample, a movie may include an image of a soda bottle with a label. Thelabel in the original media stream may be for a generic brand, or for abrand that paid for product placement into the movie while the movie wasbeing presented at movie theaters. However, once the movie enters thevideo-rental market, other advertisers may pay to have their brand'slabel overlaid into the movie for a pre-negotiated number of times,and/or for a predetermined audience demographic. Hence, theseadvertisement-inserting instructions can configure the client device toembed or overlay an image or media segment over one or more frames ofthe media stream, so that the second brand's label is displayed on topof the bottle's initial label.

In some embodiments, client device 206 can include a data publisher, anddata-brokering capabilities. For example, a user can use a personalcomputing device, tablet computer, or cell phone to generate digitalcontent (e.g., a video file, an audio file, or a document). The user'scomputing device can encode this digital content, and can broker whichlocal users or which remote devices can have access to the digitalcontent.

Publishing a Data Stream

Any entity (e.g., a person or organization) that generates or ownsdigital content can utilize the data-publishing system (also referred toherein as a “publisher”) to make the digital content available toothers. These entities may include a film maker or movie producer thatowns various movies or television programs, a musician or musicproducer, a software developer, etc. The data publisher can generateencoded data streams for his digital content, and to generate anencoding sauce that allows a broker to control access to the digitalcontent.

FIG. 3 presents a flow chart illustrating a method 300 for publishing adata stream in accordance with an embodiment. During operation, thepublisher selects a data stream to publish (operation 302), andgenerates a base sauce that can be used to encode the selected datastream (operation 304). The base sauce can include instructions thatgenerate an encoded data stream, for example, by extracting one or moredata segments from the base data stream. The publisher then processesthe data stream using the base sauce to generate the encoded data stream(operation 306), and can cache the encoded data stream locally, or on aremote data repository. In some embodiments, the publisher can receive arequest or an Interest for the data stream from a client device, and thepublisher can return the encoded data stream to satisfy the request orthe Interest. In some other embodiments, a client device can disseminatea request or Interest for the encoded data stream across aninformation-centric network, and receives the encoded data stream fromthe media repository, an intermediate cache, or any peer network devicethat can satisfy the request or Interest.

The publisher also generates an encoding sauce for the data stream(operation 308). This encoding sauce includes instructions that allow adata broker to generate a secret sauce for a recipient of the encodeddata stream. In some embodiments, the encoding sauce specifiesinstructions for generating watermarks that encode a recipient'sidentifier, and specifies locations of the data stream where thesewatermarks are to be inserted. The publisher can select one or morebrokers that are to broker access to the data stream (operation 310),and provides the encoding sauce to the one or more brokers (operation312). In some embodiments, the publisher can provide the encoding sauceto a broker over a secure channel. Also, in some embodiments, the brokercan designate one or more additional sub-brokers that are to controlaccess to the data stream. Each sub-broker may, for example, beconfigured to respond to requests from a particular geographic region,from a given set of client devices, etc.

FIG. 4 presents a flow chart illustrating a method 400 for assigning abroker to a data-consuming client device in accordance with anembodiment. During operation, the publisher can receive a request for adata stream (operation 402), and identifies one or more brokers whichhave been provisioned to broker access to the data stream (operation404). The request can include an Interest received over a named-datanetwork. To satisfy the request, the publisher generates astream-referencing packet that includes a name of the encoded datastream and/or includes at least a portion of the data stream. Thestream-referencing packet also includes at least one broker for the datastream (operation 406). The publisher then returns thestream-referencing packet to satisfy the request or Interest (operation408). The stream-referencing packet can include a Content Object that isreturned over a named-data network to satisfy an Interest message.

In some embodiments, a publisher can analyze a pirated copy of the datastream that has been illegally copied to identify the copy's firstrecipient.

FIG. 5 presents a flow chart illustrating a method 500 for identifyingan entity for whom a given personalized data stream was generated inaccordance with an embodiment. During operation, the publisher canreceive a request to identify a recipient of a personalized data stream(operation 502), and obtains an encoding sauce that corresponds to thedata stream (operation 504). Recall that the encoding sauce can indicateinstructions for generating and inserting digital watermarks into thedata stream. The publisher processes the personalized data stream basedon the instructions in the encoding sauce to detect an entity identifierfrom digital watermarks that have been embedded in the personalized datastream (operation 506).

For example, the encoding sauce may have configured a broker to performan exclusive-OR (XOR) operation between a user's unique identifier andvarious segments of the base data stream to generate various watermarksfor the personalized data stream. Hence, the publisher can obtain theuser's identifier from the watermarks by deducing the user's identifierfrom one or more watermarks that have been inserted into varioussegments of the personalized data stream. To deduce the user'sidentifier, the publisher can perform another XOR operation between awatermark and a segment of the data stream from which the watermark wasgenerated. The publisher can then use this user identifier to determinepersonal identifying information for the user (operation 508).

Brokering Access to Data Streams

A data broker can include any online service that controls access todigital content. For example, a large set of users may have registeredwith the broker to obtain digital content by either purchasing thedigital content, renting the digital content, paying for a subscriptionto access the digital content, or by agreeing to view periodicadvertisements in exchange for access to the digital content. Publisherscan sell their digital content to the broker, or can engage in abusiness arrangement with the broker. The broker can use a publisher'sdigital content to generate revenue, and can return a pre-negotiatedportion of this revenue to the publisher. This allows publishers,regardless of their monetary or business resources, to earn money fromtheir digital content by leveraging the broker's access to advertisersand paying consumers.

In some embodiments, the data broker and the publisher can reside on thesame system. For example, a publisher can deploy a data-brokeringservice to control access to their digital content, and to control howthis digital content is leveraged to earn revenue. Some digital contentcan be broadcasted for free and without commercials, while other digitalstreams require consumers to pay for the content and/or to viewcommercials and product placements within the digital content.

In some embodiments, a broker can generate a secret sauce for othersub-brokers. Each broker generates an encoding sauce by signing andstamping the encoding sauce, and inserting an identifier for asub-broker into the encoding sauce. For example, a top-level broker (ora mid-level broker) can generate the encoding sauce to include awatermark for a sub-broker, and to include an encoding sauce for thesub-broker. The top-level broker then signs the encoding sauce beforesending the encoding sauce to a sub-broker. The sub-broker can use theencoding sauce to generate a secret sauce for a client device, or togenerate an encoding sauce for another sub-broker.

A sub-broker can generate a secret sauce that includes the watermarksfrom the parent broker's encoding sauce (e.g., watermarks for the localsub-broker, and other higher-level brokers), as well as additionalwatermarks for the client device. Hence, when the client deviceprocesses the encoded data stream using the secret sauce, the clientdevice generates the personalized data stream by inserting watermarksfor one or more brokers and for the client device into various locationsof the personalized data stream as indicated by the secret sauce.

FIG. 6 illustrates a hierarchy of brokers in accordance with anembodiment. Network 600 can include one or more publishers 602 thatpublish one or more data streams by providing an encoding sauce to atop-level broker 604 for each data stream. Top-level broker 604 canassign a sub-broker 606 to each data stream by generating anotherencoding sauce for the sub-broker (e.g., sub-broker 606.2), andproviding the encoding sauce to the sub-broker.

Recall that when a client device 608 requests a data stream frompublisher 602, publisher 602 can return a packet that indicates a namefor the data stream, and indicates a name for the data stream's secretsauce stream. This allows client device 608 to obtain packets for thedata stream and for the secret sauce stream from devices across aninformation-centric network. In some embodiments, when top-level broker604 sends an encoding sauce for a data stream to sub-broker 606.2,sub-broker 606.2 advertises that it generate and return a secret saucestream for this data stream. Hence, when client device 608 disseminatesa request or an Interest for a secret sauce packet that corresponds tothe data stream, this request or Interest can flow to broker 606.2 overthe information-centric network.

Checksums

FIG. 7A illustrates an encoded data stream 708 and a set of checksums710 which have been generated from a base data stream 702 in accordancewith an embodiment. Specifically, a publisher can encode data stream 702by removing small portions of the data stream so that the encoded datastream no longer includes sufficient information for reproducing orotherwise making use of the data stream's contents. For example, thepublisher can remove a predetermined percentage of bits from data stream702 (e.g., one percent) by extracting segments 706 from data stream 702,and generating encoded data stream 708 to include the remaining datasegments 704. The publisher can upload encoded data stream 708 to acontent server, and can provide encoded data stream 708 to networkdevices and client devices across an information-centric network.

In some embodiments, each of data segments 706 can be of equal size, andcan be evenly distributed across data stream 702. In some otherembodiments, segments 704 together are approximately equal to thepredetermined percentage of data stream 702, and each of segments 704can be obtained from portions of data stream 702 that are critical toreproducing the data stream's contents (e.g., from I frames of a videofile). Alternatively, the publisher can randomly select individual bitsor data blocks (e.g., byte segments) to extract from random locations ofthe data stream 702 so that a predetermined percentage of data stream702 is extracted to generate encoded data stream 708.

The publisher can also generate checksums 710 for encoded data stream708, such that each checksum 710 corresponds to a segment 704 of encodeddata stream 708. The publisher can send checksums 710 to a broker,either within an encoding sauce, or in addition to the encoding sauce.The broker can use checksums 710 to generate a checksum for eachpersonalized data stream (or for a portion of the personalized datastream) that the broker generates for each client device that has validaccess to receive data stream 702. Also, the publisher can generate theencoding sauce to include segments 706, along with instructions forre-inserting segments 706 into the personalized data stream, andinstructions for generating and inserting one or more watermarks intothe personalized data stream.

FIG. 7B illustrates a set of watermarks 726 computed for a personalizeddata stream, and a checksum 730 computed from multiple checksums 720 andwatermarks 726 in accordance with an embodiment. Specifically, thebroker can receive an encoding sauce that includes checksums 720 forsegments of an encoded data stream, includes data segments 722 that havebeen extracted from a base data stream, and instructions for modifyingsegments 722 to generate a plurality of watermarks 726.

In some embodiments, the encoding sauce's instructions can indicate thatthe broker is to generate each watermark 726 by using a user ID 724 anda predetermined function to modify each data segment 722. For example,the broker can generate each watermark 726 by performing a bitwiseoperation (e.g., an exclusive OR (XOR) operation) between each datasegment 722 and user ID 724, by performing an arithmetic operation, orperforming any other operation now known or later developed. User ID 724can indicate any unique identifier for a user that has requested accessto the data stream, such as a unique numeric identifier, an account nameor number, an email address, or any other identifier type now know orlater developed.

Once the broker has generated the set of watermarks 726 that are to beinserted into a user's personalized data stream, the broker can computea checksum for the personalized data stream itself. Recall that brokercan receive checksums 720 from the publisher, such that checksums 720correspond to the data segments in the encoded data stream. Hence, thebroker can compute the checksum for the personalized data stream basedon checksums 720, along with watermarks 726 that are to be inserted intothe personalized data stream.

The broker then generates a secret sauce that includes watermarks 726,checksum 730, as well as the instructions from the publisher's encodingsauce that indicate how watermarks 726 are to be inserted into thepersonalized data stream.

FIG. 7C illustrates a personalized data stream 740 and a checksum 750computed from personalized data stream 740 in accordance with anembodiment. Specifically, a client device can receive an encoded datastream from a publisher (and/or from any ICN device which has cached theencoded data stream), and can receive a secret sauce stream from abroker for the data stream. The client device can obtain or computewatermarks 744 and data segments 746 from the secret sauce stream, andcan use instructions in the secret sauce stream to generate personalizeddata stream 740 by inserting watermarks 744 and/or data segments 746into specific sections of the encoded data stream. The client device canalso compute checksum 750 for the personalized data stream, and cancompare checksum 750 to a checksum in the secret sauce to verify theintegrity of the personalized data stream.

Gathering Content-View Analytics

In some embodiments, a broker can gather analytics information forviewers of digital content, and generates a report for a producer of thedigital content. The analytics information can indicate, for example,how many times a piece of digital content has been viewed, viewershipdemographics, etc. FIG. 8 presents a flow chart illustrating a method800 for presenting a data stream to a user, and providing demographicinformation to a broker in accordance with an embodiment. For example,the client device can receive a request for a data stream, from a uservia an appropriate application on the user's device (operation 802). Theclient device sends a request to obtain a broadcast of the data streamover a computer network (operation 804), and receives the encoded datastream (operation 806).

In some embodiments, the data stream may include one or more datasegments that can be processed separately. These segments can includesegments of an audio or video stream, or can include a file or documentin a data collection. The client device selects an encoded segment(operation 808), and determines whether it detects a check-inrequirement in the encoded segment (operation 810). The check-inrequirement may correspond to a broker that is gathering demographicinformation for client devices that are consuming content from thebroker. Alternatively, the check-in requirement may correspond to acontent publisher that desires to understand statistical demographicsfor consumers that are interested in the publisher's content.

If the encoded segment does not include a check-in requirement, theclient device can proceed to process the encoded data stream using thesecret sauce to generate a personalized data segment (operation 812),and presents the personalized data segment to the user as usual(operation 814). Otherwise, the client device generates a check-inmessage to a broker specified in the check-in requirement, and sends thecheck-in message to the broker (operation 816). The check-in message caninclude demographic information for the client device, a geographiclocation for the device, information on the content being consumed bythe client device, and/or any operations performed on the content by theclient device (e.g., pausing, fast forwarding, or rewinding an audio orvideo stream).

If the broker receives a valid check-in message, the broker can respondby providing a check-in confirmation to the client device. This check-inconfirmation can include an acknowledgement that the broker received theclient's check-in message. In some embodiments, the check-inconfirmation can include a secret sauce that the client device can useto process the encoded segment. The encoded data segment by itself isunusable, so the client device processes the encoded data segment usingthe secret sauce to generate a usable data segment that the clientdevice can present to the user. Once the client device receives thecheck-in confirmation from the data broker (operation 818), the clientdevice can proceed to operation 812 to decode the encoded segment andpresent the personalized data segment to the user.

Alternatively, the client device may receive the check-in requirementdirectly from the broker, and not from the encoded data stream. Forexample, after the client device selects an encoded segment of theencoded stream's contents to process (operation 808), the client devicecan send a request for a secret sauce that allows the client device todecode the encoded segment. However, instead of sending the secret sauceto the client device, the broker can respond by sending a check-inrequirement to the user's client device without sending the secretsauce. This check-in requirement requests that the client device providepersonal information or demographic information about the user.

After the client device receives the check-in requirement, the clientdevice responds by sending the check-in message to the broker thatincludes the user's personal and/or demographic information. Then, afterthe broker receives and verifies the check-in message, the broker canrespond by providing the secret sauce to the client device. The clientdevice can then proceed to use the secret sauce to generate thepersonalized data stream (operation 812), and to present thepersonalized data stream to the user (operation 814).

FIG. 9A presents a flow chart illustrating a method 900 for keepingtrack of demographics for consumers of a data stream in accordance withan embodiment. During operation, a broker can receive a check-in messagefrom a client device that's consuming the digital content (operation902). The broker analyzes the check-in message to determine a dataobject being consumed by a client device (operation 904), and todetermine demographic information for the client device (operation 906).The demographic information can include, for example, an age, a sex, alocation, an ethnic background, activities or items of interests, anemployment status, a job role, career interests, or any otherinformation that characterizes users that consume the digital content.

The broker then uses the demographic information to account for thedemographic information in association with the data object (operation908). For example, the system can update a collection of aggregated orstatistical demographic information for the data object to account forthe client device's demographic information, without explicitly storingthe client device's demographic information. In some embodiments, theaggregated or statistical information can include a set of statisticalattributes that each represents an aggregated value (e.g., a number ofclient devices that match the demographic attribute) or statisticalvalue (e.g., a percentage of client devices that match the demographicattribute). These statistical attributes can each indicate a value for agiven demographic-information category. Hence, while accounting for theclient device's demographic information, the broker can first extract aset of attribute values from the demographic information, and can updatethe corresponding attribute values in the aggregated or statisticalinformation to account for the client device.

The broker also generates a response packet, to respond to the clientdevice's check-in message (operation 910, and returns the responsepacket to the client device (operation 912). In some embodiments, theclient device may not be allowed to consume the digital content untilthe client device has “checked-in” to share its demographic informationwith the broker. Hence, the broker can generate the response packet toinclude a secret sauce that allows the client device to decode the dataobject, and generate a personalized data object that can be presented toa user.

Also, in some embodiments, the broker and the client device cancommunicate over a named-data network. The client device can generate anNDN packet that includes information to satisfy the check-inrequirement. For example, the broker can request one or more clientdevices to check-in by generating an Interest packet that includes aname associated with the check-in requirement for a given data object.The broker can disseminate this Interest over the NDN to any clientdevice that is consuming the data object. When the client devicereceives the Interest packet, the client device can generate and returna Content Object that includes the information to satisfy the check-inrequirement.

As another example, a client-device can periodically check-in by pushingto the broker any information required to satisfy the check-inrequirement. The client device can generate an Interest packet whosename includes a routable prefix that corresponds to the data objectand/or a data-brokering service which monitors consumer demographics forthe data object, and can include a suffix that includes one or moredemographic-information attributes for the client device. The clientdevice can disseminate this Interest packet over the NDN to check-intoany data-brokering server that collects demographic information for thedata object.

The Interest packet's name can also include a NONCE value to ensure thatthe Interest packet is forwarded to a server of the data-brokeringservice. The NONCE value prevents routers along the named-data networkfrom returning a cached response to another check-in Interest packet.Also, the Interest packet's name can include a unique identifier thatcorresponds to the client device or its user session to ensure that anInterest packet is unique to each client device.

The broker can generate a Content Object packet that includes theresponse packet for the client device. The Content Object packetincludes the same name as the Interest packet, which allows routersalong the named-data network to forward the Content Object toward theclient device that disseminated the Interest packet.

FIG. 9B presents a flow chart illustrating a method 930 for generating asecret sauce for a user's client device in accordance with anembodiment. During operation, the broker can generate one or more datasegments to incorporate into a personalized data stream (operation 932).A data segment can include, for example, one or more blocks of data thatwere extracted from an original data stream to produce an encoded datastream, or can include any user-targeted information to insert into adata stream. The user-targeted information can include a watermark withinformation that identifies the user or client device. As anotherexample, the user-targeted information can include an advertisement, orany other digital content that is selected specifically for the user.

The broker then generates, for each data segment, instructions forembedding the data segment into the data stream (operation 934). Theseinstructions can include, for example, instructions for inserting thedata segment into the data stream, or for encoding the data segment intoexisting portions of the data stream. The broker then generates thesecret sauce to include the data segments and the instructions(operation 936), and generates the response packet to include the secretsauce (operation 938).

In some embodiments, the broker can generate a report that includesstatistical information for users, clients, and/or programs that consumea data stream. For example, as mentioned above, the broker can obtainaggregate information from the client devices by sending check-inrequirements to these client devices. As another example, even if thebroker does not issue check-in requirements (e.g., does not receiveexplicit check-in messages that specify demographic information from theclient devices), the broker can automatically keep track of content-viewstatistics based on the requests received for the content's secretsauce. These content-view statistics can include, for example, a numberof views for a given page (e.g., a web page, a document page, etc.), orfor a given media segment (e.g., a portion of a video or audio file).The broker can compile the content-view statistics that includeaggregated viewership for a plurality of client devices, and can providea report that includes the content-view statistics to an advertiser, apublisher, or any entity that is authorized to obtain the report.

The content-view statistics can also include any aggregated statisticalinformation that can be determined from a client device's request forthe secret sauce, such as an Internet service provider, a networkbandwidth, a geographic region, etc. If the user has established aprofile with the broker, the broker can obtain a user identifier fromthe client device's request for the secret sauce, and can determinedemographic information for the user based on the user's profile. Thebroker can aggregate this additional information from a plurality ofclient devices to generate statistical information about the users thatare consuming the content, and can include this statistical informationin the report.

FIG. 9C presents a flow chart illustrating a method 960 for processing arequest for an analytics report in accordance with an embodiment. Duringoperation, the broker can receive a request for an analytics orstatistics report that indicates aggregated demographic informationrelated to consumers of a certain data object or stream (operation 962).The broker can receive the request from an advertiser, a publisher, orfrom any entity that is interested (and authorized) to obtain thereport. Upon receiving the request, the broker can verify that theentity is authorized to obtain the report (e.g., based on a digitalcertificate or any other secure identifier). The broker then obtains theaggregated demographic information associated with the data object(operation 964), and generates the analytics report that includes theaggregated demographic information (operation 966).

In some embodiments, the request can indicate parameters for theanalytics report, such as a time window, a set ofdemographic-information categories of interest. The request can alsospecify values for one or more demographic-information categories tonarrow down the scope for the analytics report, such as to learn aboutclients from a given geographic location (e.g., North America, orEurope) or with a given interest (“Sports” or “NFL”). In someembodiments, the broker may maintain an analytics repository that storesaggregated demographic information for a fine-grained time granularity,such as for one-minute time intervals. Doing so allows the broker tostore meaningful user-demographic information that does not reveal anindividual user's personal behavior data. Thus, the broker can obtainthe aggregated demographic information for a given time window bycompiling the aggregated information from a plurality of smaller timeintervals.

Alternatively, the broker can store raw behavior information for aplurality of users in the analytics repository, which keeps track of thedata objects and data streams consumed by each user or client device.The broker can use this raw behavior information to compile theaggregated demographic information for a given data object.

The broker then generates a response packet whose payload includes theanalytics report (operation 968), and returns the response packet tosatisfy the request (operation 970). In some embodiments, the broker andthe remote device can communicate over a named-data network. The remotedevice can generate an Interest packet that includes the request for theanalytics report, and can disseminate this Interest packet over thenamed-data network to obtain the report from any broker (or all brokers)that is keeping track of consumer demographics for the data object.Similarly, if a broker has designated sub-brokers, the broker canrequest and receive a report from all its sub-brokers. The broker thencombines all the reports and can send this aggregated report as well asindividual sub-reports to the publisher, advertiser, etc.

The Interest packet's name can include a routable prefix thatcorresponds to a data-brokering service, and can include a suffix thatincludes a NONCE value, a name for the data object, a desired timewindow, and/or any other parameters for the report. The NONCE valueensures that the Interest packet is forwarded to a server of thedata-brokering service by preventing routers along the named-datanetwork from returning a cached response to another check-in Interestpacket.

The broker can generate a Content Object packet that includes theanalytics report. The Content Object packet includes the same name asthe Interest packet, which allows routers along the named-data networkto forward the Content Object toward the remote device that requestedthe analytics report.

Marketplace for Buying and Selling Ad Slots

FIG. 10 illustrates an exemplary computing environment 1000 thatfacilitates placing advertisements in content streamed over apeer-to-peer network 1010 or an information-centric network 1010 inaccordance with an embodiment. Environment 1000 can include a publisher1002 that publishes a data stream, and one or more brokers 1004 thatcontrol access to the data stream. Environment 1000 can also include anadvertiser 1012 that purchases ad slots during broadcast of the datastream, and a marketplace 1008 that facilitates matching advertisementsto ad slots. Specifically, marketplace 1008 can include a trusted thirdparty to media brokers 1004 and advertiser 1012, and selects a bid byperforming an auction. The auction can include a first-price sealed-bid(FPSB) auction, an English auction, a Dutch auction, a sealed-bidsecond-price auction, or any other auction type now known or laterdeveloped.

Publisher 1002 can include a computing device that disseminates anencoded data stream 1022 over network 1010. In some embodiments, abroker 1004.1 can control access to digital content from a publisher1002 in a way that presents paid advertisements or personalized digitalcoupons to users that consume the digital content. This allows broker1004.1 to present advertisements on behalf of publisher 1002, and toearn money for publisher 1002. For example, broker 1004.1 can receive anencoding sauce 1018, which broker 1004.1 uses generate a secret sauce1020 for a client device 1006 that desires to decode an encoded datastream 1022 from publisher 1002, and that has proven to have consumed asufficient number of paid advertisements.

Client device 1006 may obtain encoded data stream 1022 either frompublisher 1002, or from any device in network 1010. However, encodeddata stream 1022 is encoded in a way that prevents client device 1006from presenting the data stream to a local user. To present the datastream, client device 1006 periodically requests a secret sauce 1020from broker 1004.1 that client device 1006 uses to decode a segment ofencoded data stream 1022 before presenting the segment to the user.However, broker 1004.1 can ensure that clients are presentingadvertisements to users by only providing secret sauce 1020 to clientdevice 1006 once client device 1006 has proven to have retrieved andprocessed a sufficient number of advertisements.

If the user is presented with a personalized digital coupon as anadvertisement, the user can redeem the coupon to obtain a product or aservice at a discounted price or for free. For example, the user can usea code printed on the coupon to redeem the coupon via a website ormobile application associated with the advertiser. Alternatively, theuser can print the digital coupon, and can present the printed coupon ata brick-and-mortar venue associated with the advertiser.

Advertisers typically design an advertising campaign with certain goalsin mind, such as a target time frame, a target geographic location, atarget audience demographic, etc. Hence, they may create theadvertisement with these goals in mind, and they look for advertisingopportunities that can meet these goals. For example, a shaving creamadvertisement that's directed to older men will have little effect whenpresented during a children's cartoon. Marketplace 1008 solves thisproblem by accepting an advertising opportunity from a set of brokers,and by accepting advertising requirements from a set of advertisers.Each advertising opportunity specifies one or more attributes describingthe advertising opportunity. These attributes can include a timeinterval during which the media broker is to provide access to the mediastream, information about a user demographic, and keywords for thedigital content over which the advertisement is to be presented. Anadvertiser's advertising requirements can indicate information regardinga target user demographic for a given advertisement. Once marketplace1008 selects a bid from an advertiser for an advertising opportunity,marketplace 1008 can establish a contract between the broker and theadvertiser. Marketplace 1008 can terminate the contract once theadvertising opportunity has expired or the advertising requirements havebeen satisfied.

In some embodiments, a broker 1004.1 can have a plurality of clientsthat typically use broker 1004.1 to consume digital content. Theseclients may either have a subscription with broker 1004.1, or broker1004.1 may be a free service that allows any client device to consumead-supported content. Broker 1004.1 can collect information from theseclients to compile demographic information to publishers and/oradvertisers that are partnered with (or planning to partner with) broker1004.1. This collected information can include real-time behavior data(e.g., a user pausing, fast-forwarding, or rewinding a media stream),demographic information, and geographic location data. Broker 1004.1 canleverage its clients to sell advertising opportunities to advertisersvia marketplace 1008, and discloses the typical client information toattract advertising bids.

Marketplace 1008 can establish a deal when broker 1004.1 proposes anadvertising opportunity, and marketplace 1008 considers bids from aplurality of advertisers to select a winning bid (e.g., from advertiser1012) whose requirements are a closest match to the advertisingopportunity's description. Alternatively, marketplace 1008 can establisha deal when advertiser 1012 provides a description of an advertisingcampaign, and marketplace 1008 selects a broker that can best satisfythe advertising campaign's requirements. Marketplace 1008 can select abest-matching advertising opportunity for an advertiser's campaign basedon an asking price set by a broker, consumer demographics specified bythe broker, and/or content keywords associated with the advertisingopportunity.

The price for placing an ad during the advertising opportunity can beset either by advertisers trying to place their advertisement during abroker's advertising opportunity (demand auction), by brokers trying towin an advertiser's campaign (supply auction), or via a double auction.In either case, the price is fixed once marketplace 1008 closes thedeal. In some embodiments, marketplace 1008 can finalize the deal usingan English auction, a Dutch auction, or using any auction type now knownor later developed. Once the deal is finalized, marketplace 1008receives a payment for the advertising campaign from advertiser 1012,and holds these funds in escrow until the advertising campaign iscompleted or the advertising opportunity ends.

Broker 1004.1 presents the advertisement to clients that consume digitalcontent associated with the advertising opportunity, such as to clientdevice 1006 consuming encoded data stream 1022 from publisher 1002. Forexample, if client device 1006 has not viewed enough advertisements toconsume a segment of encoded data stream 1022, broker 1004.1 can sendthe advertisement (or a link to the advertisement) to client device1006, along with a challenge that client device 1006 needs to completeto prove that client device 1006 has consumed the advertisement.

After presenting the advertisement, client device 1006 processes thechallenge to produce a challenge-response 1030, and sendschallenge-response 1030 to broker 1004.1 and/or marketplace 1008.Marketplace 1008 verifies that challenge-response 1030 is valid onbehalf of advertiser 1012, and never discloses information about anyspecific client device to advertiser 1012.

Broker 1004.1 or marketplace 1008 can close the advertising opportunityonce broker 1004.1 has dispatched a predetermined number ofadvertisements to client devices, and these client devices have returnedvalid challenge responses to broker 1004.1 and/or marketplace 1008.Also, if broker 1004.1 does not dispatch enough advertisements to closethe advertising campaign by the time the advertising opportunity's timewindow ends, marketplace 1008 can cancel the advertising opportunity,and returns any remaining funds to advertiser 1012. In some embodiments,marketplace 1008 can keep track of reputations on brokers andadvertisers, for example, by computing a score that indicates how wellthey deliver on the terms they promised to deliver. Marketplace 1008 candisplay a broker's reputation to advertisers, and can display anadvertiser's reputation to brokers. Also, when matching advertisers andbrokers, marketplace 1008 can give a higher priority to advertisersand/or brokers that have a better reputation.

Marketplace 1008 can also send a report to advertiser 1012, whichindicates how well the advertisement placement matched the advertisingcampaigns initial goals. This report can include aggregated demographicinformation for client devices that consumed the advertisement, such asa number of client devices for each demographic-information category.

In some embodiments, marketplace 1008 and brokers 1004 facilitateproviding targeted advertisements to clients of a satellite broadcastnetwork. For example, client device 1006 can receive encoded data stream1022 via a satellite broadcast, and can receive secret sauce 1020 via anetwork connection (e.g., a land-based computer network). A small numberof advertisements can be streamed to client device 1006 via satellite,and can be cached locally by client device 1006. Then, broker 1004.1 cannotify client device 1006 of which ads to play during which mediastreams (e.g., via the network connection).

For example, publisher 1002 can notify marketplace 1008 on content thatis to be streamed to client devices in the near future or in the distantfuture, and can indicate a description of the advertising opportunity.Advertisers can buy ad slots for this content presentation ahead oftime. When a deal is made, advertiser 1012 can provide the advertisementto the satellite system ahead of time (e.g., to publisher 1002) to allowthe advertisement to be streamed to and cached by the client devicesthat are likely to watch the content. When client device 1006 views thebroadcast of this content, broker 1004.1 can configure client device1006 to present the cached copy of the advertisement to the local userduring a commercial break.

Given that a publisher 1002 may sell ad slots during a futureadvertising opportunity, advertisers can get a better deal (e.g., alower price) for ad slots during data streams that are to be broadcastedin the distant future (e.g., next month or next year) than for other adslots in the nearer future (e.g., during the next few minutes or hours).Also, advertisers can get a better deal when purchasing ad slots for amovie or show that has not yet been created than for other movies orshows that have already been filmed and are scheduled to be streamed toclient devices.

In some embodiments, publisher 1002 can use marketplace 1008 to createan advertising opportunity for digital content that has not yet beencreated. Publisher 1002 can use any existing description of the contentto create the advertising opportunity, such as by using a script for amovie or show, and a cast listing for the movie or show. Advertisersthat buy ad slots for based on the preliminary description can get alower price, given the risk associated with possible changes to thescript and/or cast. Other possible risks include the content not meetingthe advertiser's expectations, the content may not appeal to theirexpected demographic, and/or the content (and advertisements) may not beviewed by the desired number of people.

The publisher's description of the advertising opportunity can indicatedemographic information for the target audience, a content type for thedigital content (e.g., TV show, movie, video, music, web page, newsarticle, book, etc.), and a description of the content. The descriptioncan also indicate a progress timeline for the project, such as a currentstate of development, an expected presentation date, and/or a latestpresentation date for the content.

If publisher 1002 has not yet raised the money necessary to create thedigital content, publisher 1002 can use a report of enlisted advertisersto raise investor money to create the content. These advertisers havepromised to place ads during the content, and have already placed fundsin escrow. Investors may assign a higher valuation to a project that hasattained significant interest from advertisers, as it indicatesmarketability of the digital content's overall concept.

Advertisers can safely purchase advertising slots from marketplace 1008for content that has not been created, knowing that the advertiser'smoney is held in escrow by marketplace 1008 until the broker'sadvertising opportunity is completed or expires, and/or until therequirements from the advertisers advertising campaign are met. Ifpublisher 1002 fails to create the digital content as promised,marketplace 1008 can return the advertiser's funds to the advertiser.

As was mentioned earlier, the digital content can include a web-page.Client device 1006 can include a web browser application that can obtainan encoded data stream 1022 for the web page, such that encoded datastream 1022 may be missing key information that allows the web browserto format the web page correctly. Alternatively, encoded data stream1022 may include certain content from the web page in encrypted form.The web browser can display the web page to the user by firstdownloading and presenting advertisements from broker 1004.1 in the webpage. Once client device 1006 has obtained and presented theadvertisements, client device 1006 can generate and send a challengeresponse 1030 for these advertisements to broker 1004.1, thereby provingto the broker that client device 1006 consumed the ad. After broker1004.1 validates challenge response 1030, broker 1004.1 can generates asecret sauce 1020 that includes the missing code that allows the webbrowser to display the web page properly, or includes a decryption keythat allows client device 1006 to decrypt certain content that wasencrypted in encoded data stream 1022.

Broker 1004.1 then sends secret sauce 1020 to client device 1006 toallow client device 1006 to display the web page properly to the user.Alternatively, client device 1006 can send challenge response 1030 tomarketplace 1008. Marketplace 1008 verifies challenge response 1030, andsends a confirmation to broker 1004.1 to send the secret-sauce 1020 toclient device 1006.

FIG. 11 presents a flow chart illustrating a method 1100 performed by amarketplace to match advertisers to a broker's advertising opportunityin accordance with an embodiment. During operation, the marketplace canreceive a description of an advertising opportunity from a data broker(operation 1102), and lists the advertising opportunity in an exchangethat matches advertisers to advertising opportunities (operation 1104).The advertising opportunity description can indicate a desired pricerange for the ad slot, demographic information for the expectedaudience, a type of content for the data stream (e.g., a movie, a show,a song, an article, etc.), and keywords for the data stream's contents.The advertising opportunity description can also correspond to a datastream that does not yet exist, and can indicate a current state ofdevelopment (e.g., currently filming, in production, etc.), a time frameduring which a data stream is to be made available to users, a proposedcast, and any other information related to the project.

The marketplace can receive bids for the advertising opportunity for aset of advertisers (operation 1106), and selects a matching bid for theadvertising opportunity (operation 1108). The marketplace can select thematching bid from an advertiser by matching attributes between thebroker's description of the advertising opportunity, and theadvertiser's bid to purchase an ad slot.

The marketplace then establishes an advertising campaign contractbetween the advertiser and the data broker (operation 1110). Whileestablishing the contract, the market place receives funds for theadvertising campaign from the advertiser, and holds these funds inescrow until the advertiser satisfies a certain pre-specified milestone.A milestone may include showing a single advertisement to a user, ashowing a predetermined number of advertisements to users, or any othermilestones agreed upon by the advertiser and the broker. For example,the advertiser may require that these milestones are achieved on a givenset of demographic-information categories (e.g., for clients from NorthAmerica) in order to be counted.

During the advertising campaign, the marketplace can make a payment tothe broker each time the broker achieves a milestone during theadvertising opportunity. For example, the marketplace can determinewhether the advertising opportunity has expired (operation 1112). If so,the marketplace cancels the contract (operation 1114), and returns anyremaining funds in escrow to the advertiser (operation 1116).

However, if the advertising opportunity has not expired (e.g., the datastream is still made accessible to users), the marketplace determineswhether the broker has reached an advertising milestone (operation1118). If the broker has reached a milestone, the marketplace transfersa payment for the milestone to the broker (operation 1120). Also, insome embodiments, the marketplace can retain a percentage of the paymentas a service fee, either from the payment itself, or from theadvertiser's funds in escrow.

In some embodiments, the marketplace can re-evaluate the advertisingopportunity after a predetermined time interval, or in response to anevent (e.g., in response to the broker presenting an advertisement to auser). For example, if the marketplace determines that a new milestonehas not been reached during operation 1118, the marketplace can returnto operation 1112 to re-evaluate the advertising opportunity.

FIG. 12 presents a flow chart illustrating a method 1200 performed by amarketplace to establish an advertising campaign between an advertiserand a data broker in accordance with an embodiment. During operation,the marketplace notifies an advertiser of the matching bid (operation1202), and receives, from the advertiser, a reference to anadvertisement data object and a payment for the advertising campaign(operation 1204). The advertisement's data object can include any datathat presents an advertisement to a user, such as a video or audio clip,a picture, text, or executable instructions.

The marketplace then holds the payment in escrow to pay for eachmilestone of the advertising campaign (operation 1206), and sends theadvertisement's reference to the data broker (operation 1208). Afterreceiving the reference to the advertisement, the data broker generatesa challenge for consumers of the advertisement, and generates anexpected challenge response to the advertisement. The challenge caninclude, for example, instructions that cause a client device to obtainan n^(th) byte in the advertisement object. The client device canexecute the challenge's instructions to extract the n^(th) byte from theadvertisement, and to generate a challenge-response packet that includesthe extracted n^(th) byte.

The marketplace then receives the challenge and the expectedchallenge-response value from the data broker (operation 1210). The databroker enters into a contract to fulfill the advertising campaign bysending the challenge response and expected values to the marketplace.In some embodiments, the broker can compile a report that has challengeresponses from a number of clients, and send this report or a summary ofthis report to the marketplace. The marketplace can send a confirmationmessage to the advertiser stating that the advertising campaign has beenestablished, and can send the expected challenge response value to theadvertiser in the confirmation message (operation 1212).

In some embodiments, the marketplace can receive challenge responsevalues from the client devices directly, which the marketplace can useto verify that the broker is indeed providing the data stream andadvertisements to client devices. In addition, the marketplace cancompute content-view statistics based on the challenge response messagesreceived from the client devices, and can compile the content-viewstatistics into a report to send to a publisher, advertiser, producer,etc. In some cases, the publisher or advertiser can request thesestatistics reports both from marketplace and the brokers, and cancompare the reports from the brokers and the marketplace to ensure thereports match.

The content-view statistics can include, for example, a number of viewsfor a given page (e.g., a web page, a document page, etc.) or for agiven media segment (e.g., a portion of a video or audio file, or thecomplete file), or a number of advertisements presented for a given datastream (e.g., ads shown per streaming session, or total number of adsshown across all users). The content-view statistics can also includeany aggregated statistical information that can be determined from aclient device's request for the secret sauce, such as an Internetservice provider, a network bandwidth, a geographic region, etc. If theuser has established a profile with the broker, the broker can obtain auser identifier from the client device's request for the secret sauce,and can determine demographic information for the user based on theuser's profile. The broker can use profile information from a set ofusers that have viewed the data stream to generate aggregateddemographic information for the data stream, and can include thisaggregated demographic information in the report.

FIG. 13 presents a flow chart illustrating a method 1300 performed by abroker to process a client's request for access to a data stream inaccordance with an embodiment. During operation, the broker can receivea request from a user's client device for accessing a data stream(operation 1302). The request can include an Interest for a secret saucestream that corresponds to a portion of an encoded data stream, and caninclude the client device's public key. The client device and brokerdevice can also exchange transaction messages, for example, to validatethe client device's authentication information for a pre-paid mediastream, to pay for a pay-per-view style media stream, to transfer anadvertisement token to the broker device, etc.

An advertisement token can include a data object that proves a clientdevice has viewed an advertisement, and either indicates a value (e.g.,a fixed number of credits) or has an inherent value (e.g., worth anumber of credits as determined based on market supply and demand). Forexample, when a user's client device presents an advertisement to auser, the client device can process a challenge (received from thebroker) to compute a challenge response based on the advertisement. Theclient device can create a token using the challenge response, and signsthe token using the client's private key. A broker can analyze tokensfrom the client device to determine a number of credits owned by theclient device. The broker can accept tokens from the client device aspayment to consume a data stream, or can display advertisements to theclient device to allow the client to generate new tokens.

The broker then determines a user account associated with the request(operation 1304), and validates the user's access to the data stream(operation 1306). The user can have valid access to the data stream whenthe user has purchased a movie, subscribed to a video streaming service,or when the user has purchased or subscribed to any other digitalcontent (e.g., subscribing to a news website, purchasing a softwareapplication, etc.). Alternatively, if the user has not purchased orsubscribed to the data stream, the user may access the data stream ifthe user has acquired a sufficient number of necessary credits. The usercan earn the necessary number of credits by viewing one or morecommercials or advertisements.

The broker then determines whether the user has valid access to the datastream (operation 1308). If so, the broker can obtain an encoding saucethat corresponds to the encoded data stream, either from a localrepository or from the publisher (operation 1310). The broker uses theencoding sauce to generate a secret sauce for the user's client device(operation 1312), and provides the secret sauce to the user's clientdevice (operation 1314). The client device can use this secret sauce toprocess the encoded data stream to generate a personalized data stream.In some embodiments, the broker does not need to generate a uniquesecret sauce from the encoding sauce. For example, some encoded datastreams might not need a secret sauce to decode the stream. Hence, thebroker can forward the encoding sauce to a client device duringoperation 1314, which allows the client device to process the encodeddata stream to reproduce the original data stream (whose contents arenot personalized for the client device).

In some embodiments, if the user does not have valid access to the datastream, the broker can provide the client device with an opportunity toearn credits (operation 1316). For example, if the data stream needs tobe purchased or rented, the broker can provide the user with a userinterface that allows the user to pay for the data stream's contents.Once the user has paid, the broker issues to the user a necessary numberof credits for viewing the data stream. If the data stream requires asubscription to a streaming service, such as a movie or music streamingservice, the broker can provide the user with an option to log into thestreaming service as a way to validate that the user is a subscribedmember. Alternatively, the broker can present the user with an interfacefor subscribing to the streaming service.

In some embodiments, the user can earn credits to access the data streamby viewing advertisements, such as by viewing a media stream thatpresents a commercial to the user. When the user's client devicepresents an advertisement to a user, the client device can process achallenge (received from the broker) to compute a challenge responsebased on the advertisement. The client device can create a new token forthe user using the challenge response, and signs the token using theclient's private key. An advertisement token can either indicate a value(e.g., a fixed number of credits) or can have an inherent value (e.g.,worth a number of credits as determined based on market supply anddemand).

Each advertiser can bid to display advertisements to the user, and aportion of the payment for the advertisement can be used to purchaseadvertising tokens for the user. This way, an advertiser can pay topurchase more tokens for a client as a way to reduce the number of otheradvertisers with which it needs to share a given commercial break. Whenthe user views the advertisement, the user's client device can processthe challenge to generate a number of tokens paid for by the advertiser.The user is more likely to remember the advertisement if the user didnot need to view additional advertisements before being allowed tocontinue viewing a movie or listening to music.

Hence, during operation 1308, the broker can analyze advertising tokensfrom the client device to determine whether the user possesses asufficient number of credits to gain access to a portion of an encodeddata stream. If so, the broker can proceed through operations 1310-1314to provide the user's client device with a secret sauce that allows theclient device to decode the next segment of the encoded data stream.After providing the secret sauce to the client device, the broker canreturn to operation 1302 to process a request for another segment of thedata stream.

However, if the user does not own a sufficient number of tokens, thebroker can provide a set of advertisements to the user that togetherprovide the user with an opportunity to generate the necessary number ofadvertising tokens. Also, after presenting these advertisements to theuser and sending the generated tokens to the broker, the user's clientdevice can send another request to the data broker to attempt inaccessing the data stream once again. Hence, the broker can return tooperation 1302 to process the client device's request.

FIG. 14 presents a flow chart illustrating a method 1400 performed by abroker to provide a client device an opportunity to generateadvertisement tokens in accordance with an embodiment. During operation,the broker can select a set of candidate advertisements for a clientdevice (operation 1402), and provides one or more candidateadvertisements to the client device (operation 1404). In someembodiments, to send an advertisement to the client device, the brokersends a link to the advertisement, without sending the actualadvertisement itself. The broker also sends a unique challenge query tothe client device (operation 1406). The unique challenge query isspecific to a given advertising opportunity, and the broker can generatethe unique challenge query to include a set of instructions that are tobe executed by the client device to generate a challenge-response thatproves the client device has consumed the advertisement during theadvertising opportunity. This forces a client device to compute a newchallenge response for an advertisement, even if the client device haspreviously presented the advertisement to the user. This way, clientdevices cannot attempt to gain access to a media stream withoutpresenting the advertisement to the user, for example, by returning achallenge response that the local device or a remote device generatedfor a previous showing of the same advertisement.

The broker can receive a challenge-response for an advertisement fromthe client device (operation 1408), and determines whether thechallenge-response is valid (operation 1410). For example, the broker orthe marketplace can obtain a token generated by a user's client device,verifies that the token is signed using the client's private key,decrypts or decodes the token to obtain a challenge-response message,and verifies that this challenge-response message is valid. In someembodiments, the broker can send the challenge-response message to themarketplace after the broker obtains the challenge-response message fromthe client device's token.

If the challenge-response message is valid, the broker determines anumber of credits associated with the token or the advertisement(operation 1412), and can assign these credits to the client device(operation 1414). In some embodiments, the broker receives a public keyfrom the client device along with the challenge-response. If the clientdevice has earned a sufficient number of credits, the broker can use theclient's public key to generate a secret sauce that the client devicecan use to decode an encoded data stream.

On the other hand, if the challenge-response from the client device isnot valid, the broker can perform a remedial action (operation 1418).For example, the broker can log information regarding the client deviceto compile a report of possible fraudulent activity. After processingthe challenge-response, the broker can determine whether the client hasearned a sufficient number of credits (e.g., owns a sufficient number oftokens) (operation 1416). If so, the broker can proceed to allow theclient device to access a data stream. However, if the client devicedoes not own a sufficient number of credits, the broker can return tooperation 1404 to provide more advertisements to the client device.

In some embodiments, during operation 1402, the broker can use a set oflabels to select advertisements for the client device. For example, anadvertisement stream can be associated with one or more tags. Each tagcan include a combination of one or more labels that describe theparticular advertisement stream. The broker can include a global tagrepository that can contain a plurality of Tag Objects, such that eachTag Object corresponds to a defined tag.

Each Tag Object includes references to a list of advertisement streamsthat are associated with the tag that the Tag Object represents. Anadvertiser can add an advertisement stream to the Tag Object bycontacting the Tag Object owner (e.g., the broker), who adds theadvertisement stream's name to the Tag Object in the global tagrepository. This effectively adds the tag to the advertisement stream.

The broker can use the Tag Objects to search through a collection ofadvertisement streams to select a set of candidate advertisement streamsto provide to a user's client device. For example, the broker can obtainTag Objects that correspond to a set of tags of interest, such as tagsthat describe the user's demographics, and/or a movie being consumed bythe user. The broker then produces a set of advertisement stream namesfrom the intersection of the set of Tag Objects (barring any null set).

For example, the broker may need advertising streams that are tagged“Cars,” “Palo Alto,” and “Red.” The global tag repository may containseveral Tag Objects corresponding to “Cars,” and another correspondingto “Palo Alto.” However, the global tag repository may not contain anyTag Objects corresponding to “Red.” Furthermore, a car dealer “Mike'sFast Cars” may have submitted an advertising stream that it hasassociated with the Tag Objects “Cars” and “Palo Alto.” The broker canperform a search to obtain the Tag Objects “Cars,” “Palo Alto,” and“Red.” However, the search results may only return Tag objects for“Cars” and “Palo Alto,” as the “Red” Tag Object doesn't exist. Thebroker then computes the intersection of stream names from the non-nullTag Objects, which produces a set of advertising stream names thatinclude “Mike's Fast Cars” as a candidate advertisement. The broker thenprovides the set of advertising stream names to the client device.

FIG. 15 presents a flow chart illustrating a method 1500 performed by aclient device to generate a personalized data stream for a local user inaccordance with an embodiment. During operation, the client device canreceive a request for a data stream from the user (operation 1502), suchas from a client application that is to present or provide the datastream to the user. The client device then sends a network request toobtain a broadcast of the data stream over a computer network (operation1504). In some embodiments, the request can include an Interest messagethat indicates a name for the data stream, and can be disseminated overa named-data network. The client device then receives astream-referencing packet for the data stream (operation 1506).

The stream-referencing packet can indicate a link (e.g., URL) or name(e.g., an NDN name) for downloading the encoded data stream over aninformation-centric network or over a peer-to-peer computer network, aswell as a link or name for downloading or obtaining the secret saucefrom the broker. In some other embodiments, the data stream may bebroken down into a plurality of packets, and the stream-referencingpacket can include an initial packet of the data stream. Thestream-referencing packet can include a header that indicates links ornames for one or more brokers.

The client device parses the stream-referencing packet to identify alink or name for the data stream, and to identify a link or name for adata broker that brokers access to the data stream (operation 1508). Theclient device sends a request packet to obtain an encoded data stream(operation 1510), and sends another request to the data broker to obtaina secret sauce stream for the data stream (operation 1512). The clientdevice then receives a response packet from the broker (operation 1514),and analyzes the response packet to determine the packet type (operation1516). If the response packet includes an advertisement (or a referenceto an advertisement) to present to the user, the client device canpresent the advertisement to earn credits (generate tokens) that can beused to access the data stream (operation 1518).

On the other hand, if the response packet includes a secret sauce, theclient device processes the encoded data stream using the secret saucestream to generate a personalized data stream for the local user(operation 1520). For example, the client device can process the encodeddata stream by inserting watermarks from the secret sauce stream intolocations of the encoded data stream indicated by the secret saucestream. Alternatively, the secret sauce stream can include instructionsfor generating the watermark, which the client device uses to generateone or more watermarking data segments that are inserted into theencoded data stream. These watermark-generating instructions mayindicate operations for encoding a unique identifier of a local userinto data segments provided in the secret sauce stream, or into datasegments of the encoded data stream.

The client device can also execute any other instructions from thesecret sauce, such as to perform analytics-related computations, or topresent an advertisement. In some embodiments, theadvertisement-presenting instructions can configure the client device toembed or overlay an image or media segment into a media stream. Forexample, a movie may include an image of a soda bottle with a label. Thelabel in the original media stream may be for a generic brand, or for abrand that paid for product placement into the movie while the movie wasbeing presented at movie theaters. However, once the movie enters thevideo-rental market, other advertisers may pay to have their brand'slabel overlaid into the movie for a pre-negotiated number of times,and/or for a predetermined audience demographic. Hence, the instructionsfrom the secret sauce can configure the client device to overlay animage or a media segment over one or more frames of the media stream togenerate a personalized media stream, so that the second brand's labelis displayed on top of the bottle's initial label in the personalizedmedia stream. These instructions can indicate an image and framecoordinate for each frame of the media stream, which the client deviceuses to overlay these images onto the media stream so that the brand'slabel can shift and animate along with the bottle. These instructionscan also replace or overlay audio segments within the media stream, forexample, to replace a verbal mention of one brand with the verbalmention of the second brand that is to be advertised to the local user.

In some embodiments, the client device can generate the personalizeddata stream in near real-time while presenting the media stream to theuser. For example, the client device can receive the media stream as asequence of stream segments, and receives a secret sauce stream thatincludes a secret sauce segment for each media stream segment. This way,the client device can process a media segment using a correspondingsecret sauce segment to generate a personalized version of the mediasegment for the user, while receiving other media segments and secretsauce segments for the remainder of the media stream.

FIG. 16 presents a flow chart illustrating a method 1600 performed by aclient device to present an advertisement to a local user in accordancewith an embodiment. During operation, the client device can receive,from the data broker, a reference to an advertisement, a challenge queryfor the advertisement, and the data broker's public key (operation1602). The client device uses the reference to obtain the advertisement(operation 1604). For example, the reference may include a link (e.g.,URL) that the client device uses to download the advertisement.Alternatively, the reference can include a name (e.g., an NDN name) thatthe client device uses to obtain the encoded data stream over aninformation-centric network or over a peer-to-peer computer network.

The client device then presents the advertisement to the user (operation1606), and computes a challenge response for the challenge query fromthe advertisement (operation 1608). The challenge can includeinstructions that require the client device to process the advertisementin a way that produces a result that proves the client device hasobtained and played back the advertisement. For example, the challengecan include instructions that cause the client device to obtain ann^(th) byte from the advertisement object. The client device can executethe challenge's instructions to extract the n^(th) byte from theadvertisement, and to generate a challenge response that includes theextracted n^(th) byte. The client device can generate a response packetthat includes the challenge response, the client's public key, and anidentifier for the broker, and signs the response packet using thebroker's public key (operation 1610). The client device can provide theresponse packet to the data broker, and/or to a marketplace that matchedthe advertiser with the broker's advertising opportunity (operation1612). In some embodiments, the client device encrypts the responsepacket using the broker's public key or its own private key. The brokerdecrypts the response packet, and examines the challenge response todetermine if the client device has presented the advertisement. If thechallenge response is valid, the broker can use the client's public key(or the broker's own private key) to generate a secret sauce that theclient device can use to decode an encoded data stream.

The client device can disseminate the response packet across anamed-data network to reach the broker and the marketplace. For example,the client device can generate an Interest packet that includes aroutable name prefix associated with the broker and the marketplace, andencodes the response packet as a suffix of the Interest's a name. Thisway, when the client device disseminates the Interest packet across theNDN, the NDN routers can use the Interest's name prefix to forward theInterest to the broker and the marketplace. The broker and themarketplace can then extract the response packet from the Interest'sname suffix.

FIG. 17 illustrates an exemplary apparatus 1700 that facilitatesbrokering access to digital content in accordance with an embodiment.Apparatus 1700 can comprise a plurality of modules which may communicatewith one another via a wired or wireless communication channel.Apparatus 1700 may be realized using one or more integrated circuits,and may include fewer or more modules than those shown in FIG. 17.Further, apparatus 1700 may be integrated in a computer system, orrealized as a separate device which is capable of communicating withother computer systems and/or devices. Specifically, apparatus 1700 cancomprise a communication module 1702, a base-sauce generating module1704, an encoded-stream generating module 1706, an encoding-saucegenerating module 1708, an encoding-sauce obtaining module 1710, adata-access validation module 1712, and a secret-sauce generating module1714.

In some embodiments, communication module 1702 can receive an Interestor request for a data stream, or for a secret sauce stream for anencoded data stream. Base-sauce generating module 1704 can generate abase sauce for encoding a data stream, and encoded-stream generatingmodule 1706 can process the data stream using the base sauce to generatethe encoded data stream. Encoding-sauce generating module 1708 cangenerate an encoding sauce that indicates instructions for generating adata-decoding secret sauce for a target entity.

Encoded-sauce obtaining module 1710 can receive a decoding sauce from aremote device, such as from a remote publisher. Data-access validatingmodule 1712 can process an Interest or request for the data stream'ssecret sauce to determine whether the target entity has valid access tothe data stream. Secret-sauce generating module 1714 can generate thesecret sauce for the target entity responsive to data-access validatingmodule 1712 validating the target entity's access to the data stream.

FIG. 18 illustrates an exemplary computer system 1802 that facilitatesbrokering access to digital content in accordance with an embodiment.Computer system 1802 includes a processor 1804, a memory 1806, and astorage device 1808. Memory 1806 can include a volatile memory (e.g.,RAM) that serves as a managed memory, and can be used to store one ormore memory pools. Furthermore, computer system 1802 can be coupled to adisplay device 1810, a keyboard 1812, and a pointing device 1814.Storage device 1808 can store operating system 1816, a data-broadcastingsystem 1818, and data 1834.

Data-broadcasting system 1818 can include instructions, which whenexecuted by computer system 1802, can cause computer system 1802 toperform methods and/or processes described in this disclosure.Specifically, data-broadcasting system 1818 may include instructions forreceiving an Interest or request for a data stream, or for a secretsauce stream for an encoded data stream (communication module 1820).Further, data-broadcasting system 1818 can include instructions forgenerating a base sauce for encoding a data stream (base-saucegenerating module 1822), and can also include instructions forprocessing the data stream using the base sauce to generate the encodeddata stream (encoded-stream generating module 1824).

Data-broadcasting system 1818 can include instructions for generating anencoding sauce that indicates instructions for generating adata-decoding secret sauce for a target entity (encoding-saucegenerating module 1826). Data-broadcasting system 1818 can also includeinstructions for receiving a decoding sauce from a remote device, suchas from a remote publisher (encoding-sauce obtaining module 1828).

Further, data-broadcasting system 1818 can include instructions forprocessing an Interest or request for the data stream's secret sauce todetermine whether the target entity has valid access to the data stream(data-access validating module 1830). Data-broadcasting system 1818 canalso include instructions for generating the secret sauce for the targetentity responsive to determining that the target entity has valid accessto the data stream (secret-sauce generating module 1832).

Data 1834 can include any data that is required as input or that isgenerated as output by the methods and/or processes described in thisdisclosure. Specifically, data 1834 can store at least a base sauce forencoding a base data stream, and an encoding sauce for the data stream.Data 1834 can also include the base data stream (e.g., a media stream),packets or Content Objects for the encoded data stream, and/or packetsor Content Objects for a secret sauce stream corresponding to a targetentity.

The data structures and code described in this detailed description aretypically stored on a computer-readable storage medium, which may be anydevice or medium that can store code and/or data for use by a computersystem. The computer-readable storage medium includes, but is notlimited to, volatile memory, non-volatile memory, magnetic and opticalstorage devices such as disk drives, magnetic tape, CDs (compact discs),DVDs (digital versatile discs or digital video discs), or other mediacapable of storing computer-readable media now known or later developed.

The methods and processes described in the detailed description sectioncan be embodied as code and/or data, which can be stored in acomputer-readable storage medium as described above. When a computersystem reads and executes the code and/or data stored on thecomputer-readable storage medium, the computer system performs themethods and processes embodied as data structures and code and storedwithin the computer-readable storage medium.

Furthermore, the methods and processes described above can be includedin hardware modules. For example, the hardware modules can include, butare not limited to, application-specific integrated circuit (ASIC)chips, field-programmable gate arrays (FPGAs), and otherprogrammable-logic devices now known or later developed. When thehardware modules are activated, the hardware modules perform the methodsand processes included within the hardware modules.

The foregoing descriptions of embodiments of the present invention havebeen presented for purposes of illustration and description only. Theyare not intended to be exhaustive or to limit the present invention tothe forms disclosed. Accordingly, many modifications and variations willbe apparent to practitioners skilled in the art. Additionally, the abovedisclosure is not intended to limit the present invention. The scope ofthe present invention is defined by the appended claims.

What is claimed is:
 1. A computer-implemented method, comprising:receiving, by an ad-marketplace system, one or more bids for anadvertising opportunity from a media broker that provides access to amedia stream, wherein the advertising opportunity specifies one or moreattributes describing the advertising opportunity; selecting a matchingbid from an advertiser for the advertising opportunity, wherein thematching bid specifies one or more advertising requirements that are tobe satisfied by the advertising opportunity; responsive to selecting thematching bid, establishing a contract between the media broker and theadvertiser, wherein establishing the contract involves receiving apayment from the advertiser; and responsive to confirming that theadvertising opportunity has satisfied the advertising requirements,providing to the media broker a payment for the advertisements presentedduring the advertising opportunity.
 2. The method of claim 1, whereinselecting the matching bid involves performing an auction, and whereinthe auction includes at least one of: a first-price sealed-bid (FPSB)auction; an English auction; a Dutch auction; and a sealed-bidsecond-price auction.
 3. The method of claim 1, wherein establishing thecontract further involves: receiving, from the advertiser, a referenceto the advertisement that is to be presented during the advertisingopportunity; providing the reference to the media broker; and receiving,from the media broker, a challenge question for the advertisement and anexpected challenge-response value for the advertisement's challengequestion.
 4. The method of claim 1, wherein confirming that the set ofconsumers have consumed the advertisement involves: receivingchallenge-response packets from the set of client devices, wherein arespective challenge-response packet includes at least achallenge-response value from a client device for an advertisingopportunity at the client device; and determining that the respectivechallenge-response value received from the client device matches acorresponding expected challenge-response value for the client device'sadvertising opportunity, wherein a matching challenge-response valueindicates that the client device has consumed the advertisement.
 5. Themethod of claim 4, wherein a challenge-response packet further includesone or more of: a broker identifier for the media broker; and amedia-stream identifier for the media stream.
 6. The method of claim 4,further comprising: generating an analytics report based on the set ofvalid challenge-response packets, wherein the analytics report includesaggregated content-view statistics for the media stream; and providingthe analytics report to the media broker, the advertiser, or a producerof the media stream.
 7. The method of claim 1, wherein the advertisingopportunity further specifies one or more of: an asking price forproviding an advertisement during the advertising opportunity; anexpected number of consumers of the media stream during the advertisingopportunity; demographic information for consumers of the media stream;and one or more keywords associated with the media stream.
 8. The methodof claim 1, further comprising terminating the contract in response todetermining that the advertising opportunity has expired or determiningthat the advertising requirements have been satisfied.
 9. The method ofclaim 1, wherein the attributes include at least one of: a time intervalduring which the media broker is to provide access to the media stream;a user demographic for the media stream; and keywords for the mediastream.
 10. The method of claim 1, wherein the advertising requirementsinclude at least one of: a minimum-client-count requirement for aminimum number of clients to which the media broker is to present theadvertisement; a target user demographic for the advertisement; and akeyword for the advertisement.
 11. The method of claim 1, wherein thead-marketplace system includes a trusted third party to the media brokerand the advertiser.
 12. The method of claim 1, further comprisingmaintaining a record of a media broker's reputation based on one or moreof: historical statistics on whether a number of advertisement consumersduring an advertisement campaign matched an expected number ofconsumers; historical statistics on whether characteristics foradvertisement consumers during an advertising campaign matched anexpected consumer demographic; and historical statistics on how well anadvertising opportunity's keywords matched the data object during whichthe advertisement was presented.
 13. The method of claim 1, furthercomprising maintaining a record of an advertiser's reputation based onone or more of: a quality of advertisements from the advertiser;consumer-engagement measurements from consumers of advertisements fromthe advertiser; and historical statistics on how well keywords from anadvertisement's description matched an advertisement from theadvertiser.
 14. The method of claim 1, further comprising: generating anad-campaign report for the advertiser, wherein the ad-campaign reportincludes aggregated information that indicates an effectiveness ofpresenting the advertisement to consumers of the media stream, andwherein the aggregated information includes one or more of: a number ofclient devices that have consumed the advertisement for a predeterminedtime interval; and aggregated demographic information for consumers ofthe advertisement.
 15. A non-transitory computer-readable storage mediumstoring instructions that when executed by a computer cause the computerto perform a method, the method comprising: receiving one or more bidsfor an advertising opportunity from a media broker that provides accessto a media stream, wherein the advertising opportunity specifies one ormore attributes describing the advertising opportunity; selecting amatching bid from an advertiser for the advertising opportunity, whereinthe matching bid specifies one or more advertising requirements that areto be satisfied by the advertising opportunity; responsive to selectingthe matching bid, establishing a contract between the media broker andthe advertiser, wherein establishing the contract involves receiving apayment from the advertiser; and responsive to confirming that theadvertising opportunity has satisfied the advertising requirements,providing to the media broker a payment for the advertisements presentedduring the advertising opportunity.
 16. A computer-implemented method,comprising: generating, by a media broker, an advertising opportunityfor a media stream, wherein the advertising opportunity specifies one ormore attributes describing the advertising opportunity; providing theadvertising opportunity to an ad-marketplace system; receiving areference to an advertisement for an advertising bid that was selectedfor the advertising opportunity, wherein the advertisement is to bepresented during the advertising opportunity; and creating achallenge-query for the advertising opportunity, wherein the challengequery includes instructions for generating a challenge-response based onthe advertisement, and wherein a valid challenge response indicates thata client device consumed the advertisement during the advertisingopportunity.
 17. The method of claim 16, wherein the attributes includeat least one of: a time interval during which the media stream isaccessible by a set of client devices; a user demographic for the mediastream; and keywords for the media stream.
 18. The method of claim 16,further comprising: receiving, from a client device, a request to accessa segment of the media stream; and responsive to determining that theclient device needs to present an advertisement: providing anadvertisement to the client device; and verifying that the client devicehas presented the advertisement during the advertising opportunity priorto allowing the client device to access the media stream segment. 19.The method of claim 18, wherein determining that the client device needsto present an advertisement involves on one or more of: determining thatthe client device or a user does not have a sufficient number of creditsto consume the media stream; and determining that a user of the clientdevice has not paid a fee to consume the media stream.
 20. The method ofclaim 18, wherein providing the advertisement involves: generating asecret sauce that inserts the advertisement into the media stream,wherein the secret sauce includes at least the reference to theadvertisement and the challenge-query for the advertisement, wherein theencoding sauce is encoded using a public key from the client device; andsending the secret sauce to the client device.
 21. The method of claim18, wherein providing the advertisement involves: generating anadvertisement packet that includes at least the reference to theadvertisement, the challenge query for the advertising opportunity, anda public key for the media broker, wherein the advertisement packet isencrypted using a public key from the client device; and sending theadvertisement packet to the client device.
 22. An apparatus, comprising:an advertisement-managing module to generate an advertising opportunityfor a media stream, wherein the advertising opportunity specifies one ormore attributes describing the advertising opportunity; a communicationmodule to provide the advertising opportunity to an ad-marketplacesystem, and receive a reference to an advertisement for an advertisingbid that was selected for the advertising opportunity, wherein theadvertisement is to be presented during the advertising opportunity; anda challenge-managing module to create a challenge-query for theadvertising opportunity, wherein the challenge query includesinstructions for generating a challenge-response based on theadvertisement, and wherein a valid challenge response indicates that aclient device consumed the advertisement during the advertisingopportunity.
 23. The apparatus of claim 22, wherein the communicationmodule is further configured to receive, from a client device, a requestto access a segment of the media stream; and wherein the apparatusfurther comprises an advertisement-serving module to: determine that theclient device needs to present an advertisement; provide one or moreadvertisements to the client device; and allow the client device toaccess the media stream segment in response to verifying thatchallenge-response values for the advertisements from the client deviceare valid.